$ rpki-client -vvf rpki-rsync.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/B5E7F6FF0C346A488F01A9EFAABDE1511D7E6C96.mft File: B5E7F6FF0C346A488F01A9EFAABDE1511D7E6C96.mft (raw, json) Hash identifier: 9qIzNYk3EoNIPZYFbqQhmegBfVzwBWM2b8gJoz5fEdM= Subject key identifier: E4:33:1B:04:33:74:E9:83:B0:1E:2C:A0:51:C6:94:C0:13:3E:7F:3E Authority key identifier: B5:E7:F6:FF:0C:34:6A:48:8F:01:A9:EF:AA:BD:E1:51:1D:7E:6C:96 Certificate issuer: /CN=B5E7F6FF0C346A488F01A9EFAABDE1511D7E6C96 Certificate serial: 03CBFDFC655F314C7408CD9FC9FF8B46C17C91C3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B5E7F6FF0C346A488F01A9EFAABDE1511D7E6C96.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/B5E7F6FF0C346A488F01A9EFAABDE1511D7E6C96.mft Manifest number: 0F Signing time: Tue 12 May 2026 19:46:07 +0000 Manifest this update: Tue 12 May 2026 19:41:07 +0000 Manifest next update: Wed 13 May 2026 20:02:07 +0000 Files and hashes: 1: 323430323a366163303a3a2f33332d3333203d3e20313337333036.roa (hash: 80JDffhOqKbZ05eh6nF84ipieFeMFx1jGKSA0CuNti4=) 2: B5E7F6FF0C346A488F01A9EFAABDE1511D7E6C96.crl (hash: 6xMKh+x9lUOj28ynNivuhCG2P99MnDnteLcWTjpVeJQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/B5E7F6FF0C346A488F01A9EFAABDE1511D7E6C96.crl rsync://rpki-rsync.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/B5E7F6FF0C346A488F01A9EFAABDE1511D7E6C96.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B5E7F6FF0C346A488F01A9EFAABDE1511D7E6C96.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 20:02:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:cb:fd:fc:65:5f:31:4c:74:08:cd:9f:c9:ff:8b:46:c1:7c:91:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5E7F6FF0C346A488F01A9EFAABDE1511D7E6C96 Validity Not Before: May 12 19:41:07 2026 GMT Not After : May 13 20:02:07 2026 GMT Subject: CN=E4331B043374E983B01E2CA051C694C0133E7F3E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:44:60:4c:ba:e2:a5:77:9b:41:1d:dd:e8:5d: a8:79:8d:13:a4:33:01:14:8d:f6:7d:cc:21:08:d1: b1:a3:5a:82:b4:a7:da:6e:04:5e:2f:12:2a:db:09: 42:7a:26:f7:20:f1:e6:d6:76:d1:c4:db:b8:4c:7b: 4d:19:e1:b3:7f:68:53:75:fc:e8:e1:bd:19:b1:fc: f2:84:3f:60:38:2b:bd:b0:ab:eb:87:e0:04:58:10: fe:4a:39:b5:42:50:0d:3d:b1:73:e2:0c:77:9d:e4: 24:89:67:35:45:cf:80:60:0f:d3:cb:07:c4:55:f2: aa:80:6e:c6:0c:17:ed:a2:33:33:db:79:0d:03:cd: c2:43:82:84:e6:ed:78:62:ab:f9:15:55:38:55:eb: 00:bb:08:ed:af:8b:8e:8d:fd:13:13:7d:3a:44:10: f5:56:0d:28:7f:e4:39:e2:4f:f8:96:20:e5:bf:b0: 4a:97:dd:3c:4b:44:d3:e0:8c:32:2f:2a:69:6c:bf: 62:06:f1:d7:8b:f2:6e:b8:c2:30:39:ba:ae:c6:4b: 08:8c:5c:5d:6a:00:ca:94:6d:cb:b3:a9:2d:65:4e: 2d:16:fc:03:75:5d:7f:66:3f:a8:14:cc:66:ce:8b: 67:50:90:5f:2a:72:86:6f:82:e5:a9:52:28:b1:58: 8d:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:33:1B:04:33:74:E9:83:B0:1E:2C:A0:51:C6:94:C0:13:3E:7F:3E X509v3 Authority Key Identifier: keyid:B5:E7:F6:FF:0C:34:6A:48:8F:01:A9:EF:AA:BD:E1:51:1D:7E:6C:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/B5E7F6FF0C346A488F01A9EFAABDE1511D7E6C96.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B5E7F6FF0C346A488F01A9EFAABDE1511D7E6C96.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/B5E7F6FF0C346A488F01A9EFAABDE1511D7E6C96.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:ed:a6:bc:9b:18:0a:e8:d7:ae:42:6b:13:1d:f0:e3:85:4c: 7b:de:d4:d7:b9:96:63:3c:29:52:f1:54:86:c4:2e:67:3a:72: a3:c5:6f:c6:39:39:67:d8:49:7d:c8:77:fb:c8:37:1e:6c:83: c1:1e:46:ac:08:8d:64:71:15:3e:ed:27:d7:fd:80:a7:d5:e5: d2:03:bc:48:24:f5:4b:a2:69:68:b7:06:91:2f:d2:45:f9:60: 0e:28:f3:94:25:91:07:c6:b6:57:fe:b9:aa:93:7c:dc:bc:be: b4:09:cb:d1:4e:f5:68:2f:84:3c:8f:f8:2a:ae:2f:03:40:4c: 84:25:7c:cc:72:30:2e:40:7e:db:05:ef:75:97:22:2f:22:27: 0c:0b:34:0f:4d:b3:4e:0d:8a:86:eb:79:29:a4:82:be:6d:70: 2d:29:fc:da:fb:93:73:d7:b7:23:eb:2a:17:20:44:7b:dd:48: f4:65:67:66:b2:50:06:9f:ad:2c:a6:5f:9c:15:a1:d5:be:67: bd:e3:65:12:49:2d:22:f2:75:26:99:d8:f9:de:3f:f7:5f:47: 05:36:48:68:12:36:3b:7b:47:78:e5:98:72:5c:21:50:5a:f2: 6c:bd:9c:8c:b3:0e:04:d0:6a:64:59:0e:04:ca:ce:7f:21:c4: 68:53:0d:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA8v9/GVfMUx0CM2fyf+LRsF8kcMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjVFN0Y2RkYwQzM0NkE0ODhGMDFBOUVGQUFCREUxNTEx RDdFNkM5NjAeFw0yNjA1MTIxOTQxMDdaFw0yNjA1MTMyMDAyMDdaMDMxMTAvBgNV BAMTKEU0MzMxQjA0MzM3NEU5ODNCMDFFMkNBMDUxQzY5NEMwMTMzRTdGM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQRGBMuuKld5tBHd3oXah5jROk MwEUjfZ9zCEI0bGjWoK0p9puBF4vEirbCUJ6Jvcg8ebWdtHE27hMe00Z4bN/aFN1 /OjhvRmx/PKEP2A4K72wq+uH4ARYEP5KObVCUA09sXPiDHed5CSJZzVFz4BgD9PL B8RV8qqAbsYMF+2iMzPbeQ0DzcJDgoTm7Xhiq/kVVThV6wC7CO2vi46N/RMTfTpE EPVWDSh/5DniT/iWIOW/sEqX3TxLRNPgjDIvKmlsv2IG8deL8m64wjA5uq7GSwiM XF1qAMqUbcuzqS1lTi0W/AN1XX9mP6gUzGbOi2dQkF8qcoZvguWpUiixWI2VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5DMbBDN06YOwHiygUcaUwBM+fz4wHwYDVR0j BBgwFoAUtef2/ww0akiPAanvqr3hUR1+bJYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmQzNWJmNzktZTg0YS00MGUwLThmZDQtZjE2OWMxODZiZThmLzAvQjVFN0Y2RkYw QzM0NkE0ODhGMDFBOUVGQUFCREUxNTExRDdFNkM5Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CNUU3RjZGRjBDMzQ2QTQ4OEYwMUE5RUZBQUJERTE1MTFEN0U2 Qzk2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmQzNWJmNzktZTg0YS00MGUwLThm ZDQtZjE2OWMxODZiZThmLzAvQjVFN0Y2RkYwQzM0NkE0ODhGMDFBOUVGQUFCREUx NTExRDdFNkM5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKHtprybGAro165CaxMd8OOFTHve1Ne5lmM8 KVLxVIbELmc6cqPFb8Y5OWfYSX3Id/vINx5sg8EeRqwIjWRxFT7tJ9f9gKfV5dID vEgk9UuiaWi3BpEv0kX5YA4o85QlkQfGtlf+uaqTfNy8vrQJy9FO9WgvhDyP+Cqu LwNATIQlfMxyMC5AftsF73WXIi8iJwwLNA9Ns04NiobreSmkgr5tcC0p/Nr7k3PX tyPrKhcgRHvdSPRlZ2ayUAafrSymX5wVodW+Z73jZRJJLSLydSaZ2PneP/dfRwU2 SGgSNjt7R3jlmHJcIVBa8my9nIyzDgTQamRZDgTKzn8hxGhTDZk= -----END CERTIFICATE-----Generated at Wed May 13 04:16:26 2026 by rpki-client